|
| === ***What is John the Ripper?*** === |
| John the Ripper is a password cracking program that is used during pen testing, and can help IT staff to find weak passwords or identify poor password policies. John the Ripper uses several encryption technologies to autodetect the encryptions of hashed data and compares it against a list of plain-text file that contains common passwords. |
|
| === What encryptions are supported? === |
| John the Ripper supports the following encryptions... |
|
| * UNIX crypt(3) |
| * Traditional DES-based |
| * “bigcrypt” |
| * BSDI extended DES-based |
| * FreeBSD MD5-based (linux and Cisco IOS) |
| * OpenBSD Blowfish-based |
| * Kerberos/AFS |
| * Windows LM (DES-based) |
| * DES-based tripcodes |
| * SHA-crypt hashes (newer versions of Fedora and Ubuntu) |
| * SHA-crypt and SUNMD5 hashes (Solaris) |
| While these are the officially supported encryptions, additional encryptions can be added through extensions. |